@opengeni/sdk 0.52.1 → 1.0.0

package/dist/interaction.d.ts

@@ -1,4 +1,6 @@
 import type { OpenGeniRequestOptions } from "./client.js";
+import type { BrowserDomReadRequest, BrowserDomReadResponse, BrowserTargetState } from "@opengeni/contracts";
+export type { BrowserDomReadRequest, BrowserDomReadResponse, BrowserDomSafeAttribute, BrowserTargetState, } from "@opengeni/contracts";
 import type { RetainedArtifactReference } from "./types.js";
 /** Public Browser/Computer protocol version. Driver and provider details stay private. */
 export declare const INTERACTION_PROTOCOL_VERSION: 1;
@@ -9,9 +11,31 @@ export declare const BROWSER_CONTROL_MAX_FRAME_HEADER_BYTES: number;
 export declare const BROWSER_FRAME_MAX_BYTES: number;
 export declare const BROWSER_FRAME_MAX_DIMENSION = 32768;
 export declare const BROWSER_FRAME_MAX_PIXELS = 100000000;
+/** Latest-wins invalidation cursor for workspace Browser/Computer resources. */
+export type WorkspaceInteractionRevisionEvent = {
+    workspaceId: string;
+    sequence: number;
+    revision: number;
+    type: "workspace.interaction.changed";
+    occurredAt: string;
+};
 export type InteractionJsonValue = null | string | number | boolean | InteractionJsonValue[] | {
     [key: string]: InteractionJsonValue;
 };
+export type InteractionControlFailureCode = "unknown" | "unsupported" | "os" | "not_found" | "consent_required" | "timeout" | "draining" | "protocol" | "stream" | "agent_offline" | "fenced" | "payload_too_large";
+export type InteractionControlFailure = {
+    layer: "connected_machine";
+    surface: "browser" | "computer";
+    code: InteractionControlFailureCode;
+    retryable: boolean;
+    outcomeUnknown: boolean;
+    requestId: string | undefined;
+    controlRequestId: string | undefined;
+    message: string;
+};
+/** Decodes the bounded typed control-failure details emitted by OpenGeni. Raw
+ * provider/OS detail is intentionally absent; both correlation ids are opaque. */
+export declare function interactionControlFailureFromError(error: unknown): InteractionControlFailure | null;
 export type InteractionPlacement = {
     kind: "sandbox_group";
     sandboxGroupId: string;
@@ -61,8 +85,17 @@ export type AttachedBrowserDevice = {
     createdAt: string;
     updatedAt: string;
 };
+export type AttachedBrowserBridge = {
+    enrollmentId: string;
+    state: "online" | "offline";
+    bridgeGeneration: string;
+    inventoryRevision: number;
+    connectedProfileCount: number;
+    lastSeenAt: string;
+};
 export type AttachedBrowserDeviceListResponse = {
     revision: number;
+    bridges: AttachedBrowserBridge[];
     devices: AttachedBrowserDevice[];
 };
 export type InteractionControllerBinding = {
@@ -88,6 +121,7 @@ export type BrowserSessionCapabilities = {
     downloads: boolean;
     uploads: boolean;
     clipboard: boolean;
+    permissions: boolean;
     diagnostics: boolean;
     rawCdp: boolean;
     linkedComputer: boolean;
@@ -118,6 +152,355 @@ export type BrowserSession = {
     lastUsedAt: string;
     failureCode: string | null;
 };
+export type BrowserClipboard = {
+    browserSessionId: string;
+    controllerGeneration: string;
+    revision: number;
+    text: string;
+    source: "empty" | "write" | "clear" | "copy" | "paste";
+    sourceTargetId: string | null;
+    updatedAt: string | null;
+};
+export type InteractionCredentialAuthorityRef = {
+    connectionId: string;
+    connectionSubjectId: string | null;
+    providerDomain: string;
+};
+export type NetworkRouteConfiguration = {
+    kind: "direct";
+} | {
+    kind: "proxy";
+    protocol: "http" | "https" | "socks5";
+    host: string;
+    port: number;
+    credential: InteractionCredentialAuthorityRef | null;
+} | {
+    kind: "managed";
+    providerId: string;
+    routeId: string;
+    egressClass: "datacenter" | "residential" | "isp";
+    region: string | null;
+    credential: InteractionCredentialAuthorityRef | null;
+} | {
+    kind: "tunnel";
+    placement: InteractionPlacement;
+    tunnelId: string;
+};
+export type NetworkRouteConsistency = {
+    dns: "placement" | "proxy" | "provider";
+    expectedPublicIp: string | null;
+    expectedRegion: string | null;
+    locale: string | null;
+    timezone: string | null;
+    geolocation: {
+        latitude: number;
+        longitude: number;
+        accuracyMeters: number;
+    } | null;
+    webRtc: "default" | "disable_non_proxied_udp" | "proxy_only";
+    stability: "session" | "sticky" | "persistent";
+};
+export type NetworkRoute = {
+    id: string;
+    accountId: string;
+    workspaceId: string;
+    name: string;
+    status: "active" | "archived";
+    configuration: NetworkRouteConfiguration;
+    consistency: NetworkRouteConsistency;
+    version: number;
+    createdBySubjectId: string;
+    createdAt: string;
+    updatedAt: string;
+};
+export type NetworkRouteListResponse = {
+    revision: number;
+    routes: NetworkRoute[];
+};
+export type CreateNetworkRouteRequest = {
+    operationId: string;
+    name: string;
+    configuration: NetworkRouteConfiguration;
+    consistency: NetworkRouteConsistency;
+};
+export type UpdateNetworkRouteRequest = {
+    operationId: string;
+    expectedVersion: number;
+    name?: string | undefined;
+    status?: "active" | "archived" | undefined;
+    configuration?: NetworkRouteConfiguration | undefined;
+    consistency?: NetworkRouteConsistency | undefined;
+};
+export type NetworkRouteMutationResponse = {
+    route: NetworkRoute;
+    operationId: string;
+    replayed: boolean;
+};
+export type SiteAuthFieldPurpose = "identifier" | "password" | "secret" | "totp";
+export type SiteAuthAuthority = {
+    id: string;
+    kind: "connection_fields";
+    label: string;
+    credential: InteractionCredentialAuthorityRef;
+    fields: Array<{
+        id: string;
+        purpose: SiteAuthFieldPurpose;
+        credentialKey: string;
+        digits?: number | undefined;
+        periodSeconds?: number | undefined;
+        algorithm?: "sha1" | "sha256" | "sha512" | undefined;
+    }>;
+} | {
+    id: string;
+    kind: "human";
+    label: string;
+    fields: Array<{
+        id: string;
+        purpose: SiteAuthFieldPurpose;
+    }>;
+} | {
+    id: string;
+    kind: "external_provider";
+    label: string;
+    adapterId: string;
+    connectionId: string;
+    credential: InteractionCredentialAuthorityRef | null;
+};
+export type SiteAuthMethod = {
+    id: string;
+    kind: "password" | "sso" | "magic_link" | "passkey" | "external";
+    label: string;
+    authorityIds: string[];
+};
+export type SiteAuthHealthPolicy = {
+    mode: "on_use" | "maintained";
+    intervalSeconds: number | null;
+    automaticRepair: boolean;
+};
+export type SiteAuthConnectionConfiguration = {
+    name: string;
+    accountLabel: string;
+    origins: string[];
+    loginUrl: string | null;
+    verificationUrlPrefixes: string[];
+    authorities: SiteAuthAuthority[];
+    methods: SiteAuthMethod[];
+    preferredIdentityId: string | null;
+    preferredPlacement: InteractionPlacement | null;
+    preferredNetworkRouteId: string | null;
+    healthPolicy: SiteAuthHealthPolicy;
+};
+export type SiteAuthConnection = SiteAuthConnectionConfiguration & {
+    id: string;
+    accountId: string;
+    workspaceId: string;
+    status: "active" | "archived";
+    verificationState: "unknown" | "verified" | "needs_repair" | "failed";
+    lastVerifiedAt: string | null;
+    lastVerifiedUrl: string | null;
+    lastCheckedAt: string | null;
+    nextCheckAt: string | null;
+    maintenance: {
+        action: "health_check" | "repair";
+        sessionId: string | null;
+        dueAt: string;
+        startedAt: string | null;
+    } | null;
+    repairCode: string | null;
+    version: number;
+    createdBySubjectId: string;
+    createdAt: string;
+    updatedAt: string;
+};
+export type SiteAuthConnectionListResponse = {
+    revision: number;
+    connections: SiteAuthConnection[];
+};
+export type CreateSiteAuthConnectionRequest = SiteAuthConnectionConfiguration & {
+    operationId: string;
+};
+export type UpdateSiteAuthConnectionRequest = Partial<SiteAuthConnectionConfiguration> & {
+    operationId: string;
+    expectedVersion: number;
+    status?: "active" | "archived" | undefined;
+};
+export type SiteAuthConnectionMutationResponse = {
+    connection: SiteAuthConnection;
+    operationId: string;
+    replayed: boolean;
+};
+export type AuthRun = {
+    id: string;
+    accountId: string;
+    workspaceId: string;
+    siteAuthConnectionId: string;
+    browserSessionId: string;
+    targetId: string;
+    controllerGeneration: string;
+    targetGeneration: string;
+    documentGeneration: string | null;
+    purpose: "authenticate" | "health_check" | "repair";
+    methodId: string | null;
+    authorityId: string | null;
+    state: "discovering" | "awaiting_choice" | "awaiting_secret" | "awaiting_external_action" | "working" | "verified" | "failed" | "cancelled";
+    choices: Array<{
+        id: string;
+        label: string;
+        methodId: string;
+    }>;
+    pendingFields: Array<{
+        id: string;
+        label: string;
+        purpose: SiteAuthFieldPurpose;
+    }>;
+    externalAction: {
+        kind: "push" | "security_key" | "passkey" | "device" | "human" | "other";
+        label: string;
+        expiresAt: string | null;
+    } | null;
+    interventionId: string | null;
+    verifiedUrl: string | null;
+    failureCode: string | null;
+    version: number;
+    operationId: string;
+    createdBySubjectId: string;
+    createdAt: string;
+    updatedAt: string;
+    settledAt: string | null;
+};
+export type AuthRunListResponse = {
+    runs: AuthRun[];
+};
+export type AuthRunMutationResponse = {
+    run: AuthRun;
+    operationId: string;
+    replayed: boolean;
+};
+export type StartAuthRunRequest = {
+    operationId: string;
+    siteAuthConnectionId: string;
+    targetId: string;
+    expectedTargetGeneration: string;
+    expectedDocumentGeneration: string | null;
+    purpose?: "authenticate" | "health_check" | "repair" | undefined;
+    methodId?: string | undefined;
+    authorityId?: string | undefined;
+};
+export type ReportAuthRunRequest = {
+    operationId: string;
+    expectedVersion: number;
+    methodId?: string | undefined;
+    authorityId?: string | undefined;
+    state: "awaiting_choice" | "awaiting_secret" | "awaiting_external_action" | "working" | "failed" | "cancelled";
+    choices?: AuthRun["choices"] | undefined;
+    pendingFields?: AuthRun["pendingFields"] | undefined;
+    externalAction?: AuthRun["externalAction"] | undefined;
+    failureCode?: string | null | undefined;
+};
+export type ProtectedAuthFillRequest = {
+    operationId: string;
+    expectedVersion: number;
+    expectedTargetGeneration: string;
+    expectedDocumentGeneration: string | null;
+    expectedFrameId: string | null;
+    authorityId: string;
+    fields: Array<{
+        fieldId: string;
+        locator: BrowserLocator;
+    }>;
+    submit: {
+        type: "none";
+    } | {
+        type: "click";
+        locator: BrowserLocator;
+    } | {
+        type: "press";
+        key: string;
+        locator?: BrowserLocator | undefined;
+    };
+};
+export type ProtectedAuthFillResponse = {
+    run: AuthRun;
+    status: "submitted" | "working" | "needs_human" | "stale" | "failed";
+    operationId: string;
+    replayed: boolean;
+};
+export type ExternalAuthRunRequest = {
+    operationId: string;
+    expectedVersion: number;
+    action: "start" | "poll";
+};
+export type ExternalAuthRunResponse = {
+    run: AuthRun;
+    status: "working" | "needs_human" | "ready_to_verify" | "failed";
+    operationId: string;
+    replayed: boolean;
+};
+export type ExternalAuthInteractiveRequest = {
+    operationId: string;
+    expectedVersion: number;
+};
+export type ExternalAuthInteractiveResponse = {
+    authRunId: string;
+    url: string;
+    expiresAt: string | null;
+};
+export type VerifyAuthRunRequest = {
+    operationId: string;
+    expectedVersion: number;
+};
+export type InteractionIntervention = {
+    id: string;
+    accountId: string;
+    workspaceId: string;
+    resourceKind: "browser_session" | "computer_session";
+    resourceId: string;
+    targetId: string;
+    controllerGeneration: string;
+    targetGeneration: string;
+    documentGeneration: string | null;
+    kind: "manual_login" | "mfa" | "external_action" | "confirmation" | "other";
+    reason: string;
+    status: "open" | "completed" | "dismissed" | "expired" | "cancelled";
+    authRunId: string | null;
+    originatingSessionId: string;
+    originatingTurnId: string | null;
+    originatingAttemptId: string | null;
+    originatingToolOperationId: string | null;
+    responseActorSubjectId: string | null;
+    version: number;
+    operationId: string;
+    expiresAt: string;
+    createdAt: string;
+    updatedAt: string;
+    settledAt: string | null;
+};
+export type InteractionInterventionListResponse = {
+    interventions: InteractionIntervention[];
+};
+export type CreateInteractionInterventionRequest = {
+    operationId: string;
+    resourceKind: "browser_session" | "computer_session";
+    resourceId: string;
+    targetId: string;
+    expectedControllerGeneration: string;
+    expectedTargetGeneration: string;
+    expectedDocumentGeneration: string | null;
+    kind: InteractionIntervention["kind"];
+    reason: string;
+    authRunId?: string | undefined;
+    expiresInSeconds?: number | undefined;
+};
+export type ResolveInteractionInterventionRequest = {
+    operationId: string;
+    expectedVersion: number;
+    outcome: "completed" | "dismissed";
+};
+export type InteractionInterventionMutationResponse = {
+    intervention: InteractionIntervention;
+    operationId: string;
+    replayed: boolean;
+};
 export type BrowserIdentityStatus = "active" | "archived";
 export type BrowserRevisionComponentKind = "chromium_profile" | "normalized_web_state" | "provider_snapshot";
 export type BrowserRevisionPortability = "portable" | "provider_bound" | "placement_bound";
@@ -161,6 +544,7 @@ export type BrowserIdentity = {
     workspaceId: string;
     name: string;
     status: BrowserIdentityStatus;
+    version: number;
     defaultRevisionId: string | null;
     headGeneration: number;
     revisionCount: number;
@@ -180,6 +564,13 @@ export type CreateBrowserIdentityRequest = {
     operationId: string;
     name: string;
 };
+export type UpdateBrowserIdentityRequest = {
+    operationId: string;
+    expectedVersion: number;
+    name?: string | undefined;
+    status?: BrowserIdentityStatus | undefined;
+    defaultRevisionId?: string | undefined;
+};
 export type BrowserIdentityMutationResponse = {
     identity: BrowserIdentity;
     operationId: string;
@@ -210,6 +601,41 @@ export type BrowserTarget = {
     attached: boolean;
     createdAt: string;
 };
+export type BrowserDownloadStatus = "in_progress" | "completed" | "cancelled" | "failed" | "unavailable";
+/** One browser-produced file. Its bytes remain private to the exact browser
+ * controller until an explicit save publishes them into the workspace. */
+export type BrowserDownload = {
+    id: string;
+    browserSessionId: string;
+    controllerGeneration: string;
+    targetId: string | null;
+    filename: string;
+    status: BrowserDownloadStatus;
+    receivedBytes: number;
+    totalBytes: number | null;
+    sha256: string | null;
+    version: number;
+    startedAt: string;
+    settledAt: string | null;
+    failureCode: string | null;
+};
+export type BrowserDownloadListResponse = {
+    browserSessionId: string;
+    controllerGeneration: string;
+    downloads: BrowserDownload[];
+};
+export type BrowserDownloadSaveRequest = {
+    operationId: string;
+    destinationPath: string;
+    overwrite?: boolean | undefined;
+};
+export type BrowserDownloadSaveResponse = {
+    download: BrowserDownload;
+    destinationPath: string;
+    fileId: string;
+    operationId: string;
+    replayed: boolean;
+};
 export type InteractionRect = {
     x: number;
     y: number;
@@ -267,6 +693,14 @@ export type BrowserObservation = {
     frameId: string | null;
     semantic: InteractionSemanticSnapshot | InteractionSemanticDiff | null;
     screenshot: RetainedArtifactReference | null;
+    viewport?: {
+        width: number;
+        height: number;
+        visualWidth: number;
+        visualHeight: number;
+        deviceScaleFactor: number;
+        maxTouchPoints: number;
+    } | null | undefined;
     focusedRef: string | null;
     changedRegions: InteractionRect[];
     diagnostics: InteractionDiagnosticSummary;
@@ -318,9 +752,22 @@ export type BrowserLocator = {
     kind: "css";
     selector: string;
 };
+export type BrowserPermission = "geolocation" | "notifications" | "camera" | "microphone" | "midi" | "midi_sysex" | "sensors" | "idle_detection" | "local_fonts" | "window_management";
+export type BrowserPermissionSetting = "granted" | "denied" | "prompt";
 export type BrowserAction = {
     type: "navigate";
     url: string;
+} | {
+    type: "history";
+    direction: "back" | "forward";
+} | {
+    type: "activate";
+} | {
+    type: "viewport";
+    width: number;
+    height: number;
+    mobile: boolean;
+    deviceScaleFactor?: number | undefined;
 } | {
     type: "click";
     locator: BrowserLocator;
@@ -370,6 +817,7 @@ export type BrowserAction = {
     deltaX?: number | undefined;
     deltaY?: number | undefined;
     button?: "left" | "right" | "middle" | undefined;
+    clickCount?: 1 | 2 | undefined;
 } | {
     type: "handle_dialog";
     response: "accept" | "dismiss";
@@ -378,6 +826,16 @@ export type BrowserAction = {
     type: "upload";
     locator: BrowserLocator;
     workspaceFileIds: string[];
+} | {
+    type: "clipboard";
+    operation: "write" | "clear" | "copy" | "paste";
+    text?: string | undefined;
+    locator?: BrowserLocator | undefined;
+    content?: "selection" | "value" | "text" | undefined;
+} | {
+    type: "permission";
+    permission: BrowserPermission;
+    setting: BrowserPermissionSetting;
 } | {
     type: "wait";
     condition: "load" | "network_idle" | "visible" | "hidden";
@@ -387,6 +845,7 @@ export type BrowserAction = {
 export type BrowserActionBatch = {
     type: "batch";
     actions: BrowserAction[];
+    fenceEachAction?: true | undefined;
 };
 export type InteractionError = {
     code: "resource_not_found" | "resource_unavailable" | "controller_stale" | "target_not_found" | "target_stale" | "observation_stale" | "document_stale" | "frame_stale" | "locator_not_found" | "locator_ambiguous" | "unsupported" | "permission_denied" | "machine_locked" | "attempt_stale" | "operation_conflict" | "outcome_unknown" | "invalid_action" | "timeout" | "controller_lost" | "driver_failed";
@@ -413,9 +872,12 @@ export type CreateBrowserSessionRequest = {
     name?: string | undefined;
     initialUrl?: string | undefined;
     headless?: boolean | undefined;
+    storageMode?: "private_profile" | "ephemeral_context" | undefined;
+    engine?: "chromium" | "lightpanda" | undefined;
     placement?: InteractionPlacement | undefined;
     identityId?: string | undefined;
     baseRevisionId?: string | undefined;
+    networkRouteId?: string | undefined;
     linkedComputerSessionId?: string | undefined;
 };
 export type BrowserSessionListResponse = {
@@ -453,11 +915,20 @@ export type InteractionFrameStreamAttachment<RelayKind extends 3 | 4 = 3 | 4> =
         port: number;
     };
 };
+export type ComputerFrameStreamAttachment = InteractionFrameStreamAttachment<4> | {
+    kind: "direct_rfb";
+    url: string;
+    protocols: string[];
+    inputAllowed: boolean;
+};
 export type BrowserSessionAttachment = {
     browserSessionId: string;
     controllerGeneration: string;
     targetId: string;
     stream: InteractionFrameStreamAttachment<3>;
+    /** Negotiated from this attachment’s live controller, absent on older helpers. */
+    fencedInputBatches?: true | undefined;
+    focusedInputObservations?: true | undefined;
     expiresAt: string;
 };
 export type BrowserSessionAttachmentRequest = {
@@ -471,6 +942,10 @@ export type BrowserActionRequest = {
     expectedTargetGeneration: string;
     expectedDocumentGeneration: string | null;
     expectedFrameId: string | null;
+    /** `input` is negotiated by focusedInputObservations on a live attachment.
+     * It returns optional native-select metadata after a pointer click, and null
+     * for ordinary input. Use full for agent observations. */
+    observationMode?: "full" | "none" | "input" | undefined;
     action: BrowserAction | BrowserActionBatch;
 };
 export type BrowserActionReceipt = {
@@ -499,9 +974,19 @@ export type ComputerSessionCapabilities = {
     semanticActions: boolean;
     pointerInput: boolean;
     keyboardInput: boolean;
+    clipboard: boolean;
     backgroundActions: boolean;
+    /** Raw window input stays in the background. Absent means foreground-only. */
+    backgroundInput?: boolean | undefined;
     parallelApps: boolean;
 };
+export type ComputerClipboard = {
+    computerSessionId: string;
+    controllerGeneration: string;
+    text: string | null;
+    truncated: boolean;
+    observedAt: string;
+};
 export type ComputerSession = {
     id: string;
     accountId: string;
@@ -585,6 +1070,10 @@ export type ComputerAction = {
     type: "keyboard";
     action: "type" | "press";
     value: string;
+} | {
+    type: "clipboard";
+    operation: "write" | "clear" | "copy" | "paste";
+    text?: string | undefined;
 } | {
     type: "focus";
     targetId: string;
@@ -626,9 +1115,17 @@ export type ComputerSessionAttachment = {
     computerSessionId: string;
     controllerGeneration: string;
     targetId: string;
-    stream: InteractionFrameStreamAttachment<4>;
+    /** Viewer posture when attached; actions still reauthorize the live source. */
+    inputAllowed?: boolean | undefined;
+    stream: ComputerFrameStreamAttachment;
     expiresAt: string;
 };
+/** Caller-specific hint only; every action still requires live authorization. */
+export type ComputerSessionInputPosture = {
+    computerSessionId: string;
+    controllerGeneration: string;
+    inputAllowed: boolean;
+};
 export type ComputerSessionAttachmentRequest = {
     targetId: string;
     expiresInSeconds?: number | undefined;
@@ -667,20 +1164,48 @@ export type BrowserDiagnosticsOptions = {
 };
 /** The exact HTTP surface needed by the framework-free interaction client. */
 export interface InteractionTransport {
+    listNetworkRoutes(workspaceId: string, options?: NetworkRouteListOptions): Promise<NetworkRouteListResponse>;
+    getNetworkRoute(workspaceId: string, networkRouteId: string, options?: OpenGeniRequestOptions): Promise<NetworkRoute>;
+    createNetworkRoute(workspaceId: string, request: CreateNetworkRouteRequest, options?: OpenGeniRequestOptions): Promise<NetworkRouteMutationResponse>;
+    updateNetworkRoute(workspaceId: string, networkRouteId: string, request: UpdateNetworkRouteRequest, options?: OpenGeniRequestOptions): Promise<NetworkRouteMutationResponse>;
+    listSiteAuthConnections(workspaceId: string, options?: SiteAuthConnectionListOptions): Promise<SiteAuthConnectionListResponse>;
+    getSiteAuthConnection(workspaceId: string, siteAuthConnectionId: string, options?: OpenGeniRequestOptions): Promise<SiteAuthConnection>;
+    createSiteAuthConnection(workspaceId: string, request: CreateSiteAuthConnectionRequest, options?: OpenGeniRequestOptions): Promise<SiteAuthConnectionMutationResponse>;
+    updateSiteAuthConnection(workspaceId: string, siteAuthConnectionId: string, request: UpdateSiteAuthConnectionRequest, options?: OpenGeniRequestOptions): Promise<SiteAuthConnectionMutationResponse>;
+    listAuthRuns(workspaceId: string, options?: AuthRunListOptions): Promise<AuthRunListResponse>;
+    getAuthRun(workspaceId: string, authRunId: string, options?: OpenGeniRequestOptions): Promise<AuthRun>;
+    startBrowserAuthRun(workspaceId: string, browserSessionId: string, request: StartAuthRunRequest, options?: OpenGeniRequestOptions): Promise<AuthRunMutationResponse>;
+    reportBrowserAuthRun(workspaceId: string, browserSessionId: string, authRunId: string, request: ReportAuthRunRequest, options?: OpenGeniRequestOptions): Promise<AuthRunMutationResponse>;
+    protectedBrowserAuthFill(workspaceId: string, browserSessionId: string, authRunId: string, request: ProtectedAuthFillRequest, options?: OpenGeniRequestOptions): Promise<ProtectedAuthFillResponse>;
+    advanceExternalBrowserAuthRun(workspaceId: string, browserSessionId: string, authRunId: string, request: ExternalAuthRunRequest, options?: OpenGeniRequestOptions): Promise<ExternalAuthRunResponse>;
+    openExternalBrowserAuthFlow(workspaceId: string, browserSessionId: string, authRunId: string, request: ExternalAuthInteractiveRequest, options?: OpenGeniRequestOptions): Promise<ExternalAuthInteractiveResponse>;
+    verifyBrowserAuthRun(workspaceId: string, browserSessionId: string, authRunId: string, request: VerifyAuthRunRequest, options?: OpenGeniRequestOptions): Promise<AuthRunMutationResponse>;
+    listInteractionInterventions(workspaceId: string, options?: InteractionInterventionListOptions): Promise<InteractionInterventionListResponse>;
+    getInteractionIntervention(workspaceId: string, interventionId: string, options?: OpenGeniRequestOptions): Promise<InteractionIntervention>;
+    createInteractionIntervention(workspaceId: string, request: CreateInteractionInterventionRequest, options?: OpenGeniRequestOptions): Promise<InteractionInterventionMutationResponse>;
+    resolveInteractionIntervention(workspaceId: string, interventionId: string, request: ResolveInteractionInterventionRequest, options?: OpenGeniRequestOptions): Promise<InteractionInterventionMutationResponse>;
     listAttachedBrowsers(workspaceId: string, options?: AttachedBrowserDeviceListOptions): Promise<AttachedBrowserDeviceListResponse>;
     getAttachedBrowser(workspaceId: string, deviceId: string, options?: OpenGeniRequestOptions): Promise<AttachedBrowserDevice>;
     listBrowserIdentities(workspaceId: string, options?: BrowserIdentityListOptions): Promise<BrowserIdentityListResponse>;
     getBrowserIdentity(workspaceId: string, identityId: string, options?: OpenGeniRequestOptions): Promise<BrowserIdentity>;
     createBrowserIdentity(workspaceId: string, request: CreateBrowserIdentityRequest, options?: OpenGeniRequestOptions): Promise<BrowserIdentityMutationResponse>;
+    updateBrowserIdentity(workspaceId: string, identityId: string, request: UpdateBrowserIdentityRequest, options?: OpenGeniRequestOptions): Promise<BrowserIdentityMutationResponse>;
     listBrowserRevisions(workspaceId: string, identityId: string, options?: OpenGeniRequestOptions): Promise<BrowserRevisionListResponse>;
     listBrowserSessions(workspaceId: string, options?: OpenGeniRequestOptions): Promise<BrowserSessionListResponse>;
     getBrowserSession(workspaceId: string, browserSessionId: string, options?: OpenGeniRequestOptions): Promise<BrowserSession>;
+    readBrowserClipboard(workspaceId: string, browserSessionId: string, options?: OpenGeniRequestOptions): Promise<BrowserClipboard>;
+    listBrowserDownloads(workspaceId: string, browserSessionId: string, options?: OpenGeniRequestOptions): Promise<BrowserDownloadListResponse>;
+    getBrowserDownload(workspaceId: string, browserSessionId: string, downloadId: string, options?: OpenGeniRequestOptions): Promise<BrowserDownload>;
+    saveBrowserDownload(workspaceId: string, browserSessionId: string, downloadId: string, request: BrowserDownloadSaveRequest, options?: OpenGeniRequestOptions): Promise<BrowserDownloadSaveResponse>;
     createBrowserSession(workspaceId: string, request: CreateBrowserSessionRequest, options?: OpenGeniRequestOptions): Promise<BrowserSessionMutationResponse>;
     listBrowserTargets(workspaceId: string, browserSessionId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetListResponse>;
-    openBrowserTarget(workspaceId: string, browserSessionId: string, request?: BrowserOpenTargetRequest, options?: OpenGeniRequestOptions): Promise<BrowserTarget>;
-    selectBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTarget>;
+    openBrowserTarget(workspaceId: string, browserSessionId: string, request?: BrowserOpenTargetRequest, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
+    selectBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
     closeBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetListResponse>;
     observeBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
+    getBrowserTargetState(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetState>;
+    readBrowserDom(workspaceId: string, browserSessionId: string, targetId: string, request: BrowserDomReadRequest, options?: OpenGeniRequestOptions): Promise<BrowserDomReadResponse>;
+    captureBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions, captureOptions?: BrowserScreenshotOptions): Promise<BrowserFrame>;
     actInBrowser(workspaceId: string, browserSessionId: string, request: BrowserActionRequest, options?: OpenGeniRequestOptions): Promise<BrowserActionReceipt>;
     getBrowserActionReceipt(workspaceId: string, browserSessionId: string, operationId: string, options?: OpenGeniRequestOptions): Promise<BrowserActionReceipt>;
     listBrowserDiagnostics(workspaceId: string, browserSessionId: string, targetId: string, options?: BrowserDiagnosticsOptions): Promise<BrowserDiagnosticBatch>;
@@ -692,9 +1217,12 @@ export interface InteractionTransport {
     endBrowserSession(workspaceId: string, browserSessionId: string, request: BrowserSessionLifecycleRequest, options?: OpenGeniRequestOptions): Promise<BrowserSessionMutationResponse>;
     listComputerSessions(workspaceId: string, options?: OpenGeniRequestOptions): Promise<ComputerSessionListResponse>;
     getComputerSession(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerSession>;
+    getComputerInputPosture?(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerSessionInputPosture>;
+    readComputerClipboard(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerClipboard>;
     createComputerSession(workspaceId: string, request: CreateComputerSessionRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionMutationResponse>;
     listComputerTargets(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerTargetListResponse>;
     observeComputerTarget(workspaceId: string, computerSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<ComputerObservation>;
+    captureComputerTarget(workspaceId: string, computerSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<ComputerFrame>;
     actInComputer(workspaceId: string, computerSessionId: string, request: ComputerActionRequest, options?: OpenGeniRequestOptions): Promise<ComputerActionReceipt>;
     getComputerActionReceipt(workspaceId: string, computerSessionId: string, operationId: string, options?: OpenGeniRequestOptions): Promise<ComputerActionReceipt>;
     attachComputerSession(workspaceId: string, computerSessionId: string, request: ComputerSessionAttachmentRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionAttachment>;
@@ -706,9 +1234,29 @@ export type BrowserInteractionTransport = InteractionTransport;
 export type BrowserIdentityListOptions = OpenGeniRequestOptions & {
     includeArchived?: boolean | undefined;
 };
+export type NetworkRouteListOptions = OpenGeniRequestOptions & {
+    includeArchived?: boolean | undefined;
+};
+export type SiteAuthConnectionListOptions = OpenGeniRequestOptions & {
+    includeArchived?: boolean | undefined;
+};
+export type AuthRunListOptions = OpenGeniRequestOptions & {
+    browserSessionId?: string | undefined;
+    siteAuthConnectionId?: string | undefined;
+    includeSettled?: boolean | undefined;
+};
+export type InteractionInterventionListOptions = OpenGeniRequestOptions & {
+    resourceKind?: "browser_session" | "computer_session" | undefined;
+    resourceId?: string | undefined;
+    includeSettled?: boolean | undefined;
+};
 export type AttachedBrowserDeviceListOptions = OpenGeniRequestOptions & {
     includeDisconnected?: boolean | undefined;
 };
+export type BrowserDownloadSaveOptions = OpenGeniRequestOptions & {
+    operationId?: string | undefined;
+    overwrite?: boolean | undefined;
+};
 export type CurrentOrOpenBrowserOptions = {
     workspaceId: string;
     associationSessionId: string;
@@ -716,9 +1264,11 @@ export type CurrentOrOpenBrowserOptions = {
     name?: string | undefined;
     initialUrl?: string | undefined;
     headless?: boolean | undefined;
+    storageMode?: "private_profile" | "ephemeral_context" | undefined;
     placement?: InteractionPlacement | undefined;
     identityId?: string | undefined;
     baseRevisionId?: string | undefined;
+    networkRouteId?: string | undefined;
     linkedComputerSessionId?: string | undefined;
     signal?: AbortSignal | undefined;
 };
@@ -733,10 +1283,89 @@ export type CurrentOrOpenComputerOptions = {
 /** Framework-free resource facade over the public interaction HTTP API. */
 export declare class OpenGeniInteractionClient {
     readonly attachedBrowsers: AttachedBrowserDeviceCollection;
+    readonly authRuns: AuthRunCollection;
     readonly browsers: BrowserSessionCollection;
     readonly computers: ComputerSessionCollection;
     readonly identities: BrowserIdentityCollection;
+    readonly interventions: InteractionInterventionCollection;
+    readonly networkRoutes: NetworkRouteCollection;
+    readonly siteAuthConnections: SiteAuthConnectionCollection;
+    constructor(transport: BrowserInteractionTransport);
+}
+export declare class NetworkRouteCollection {
+    private readonly transport;
+    constructor(transport: BrowserInteractionTransport);
+    list(workspaceId: string, options?: NetworkRouteListOptions): Promise<NetworkRouteListResponse>;
+    route(workspaceId: string, networkRouteId: string): NetworkRouteResource;
+    create(workspaceId: string, request: CreateNetworkRouteRequest, options?: OpenGeniRequestOptions): Promise<NetworkRouteResource>;
+}
+export declare class NetworkRouteResource {
+    private readonly transport;
+    readonly workspaceId: string;
+    readonly id: string;
+    constructor(transport: BrowserInteractionTransport, workspaceId: string, id: string);
+    get(options?: OpenGeniRequestOptions): Promise<NetworkRoute>;
+    update(request: UpdateNetworkRouteRequest, options?: OpenGeniRequestOptions): Promise<NetworkRouteMutationResponse>;
+}
+export declare class SiteAuthConnectionCollection {
+    private readonly transport;
+    constructor(transport: BrowserInteractionTransport);
+    list(workspaceId: string, options?: SiteAuthConnectionListOptions): Promise<SiteAuthConnectionListResponse>;
+    connection(workspaceId: string, connectionId: string): SiteAuthConnectionResource;
+    create(workspaceId: string, request: CreateSiteAuthConnectionRequest, options?: OpenGeniRequestOptions): Promise<SiteAuthConnectionResource>;
+}
+export declare class SiteAuthConnectionResource {
+    private readonly transport;
+    readonly workspaceId: string;
+    readonly id: string;
+    constructor(transport: BrowserInteractionTransport, workspaceId: string, id: string);
+    get(options?: OpenGeniRequestOptions): Promise<SiteAuthConnection>;
+    update(request: UpdateSiteAuthConnectionRequest, options?: OpenGeniRequestOptions): Promise<SiteAuthConnectionMutationResponse>;
+}
+export declare class AuthRunCollection {
+    private readonly transport;
+    constructor(transport: BrowserInteractionTransport);
+    list(workspaceId: string, options?: AuthRunListOptions): Promise<AuthRunListResponse>;
+    get(workspaceId: string, authRunId: string, options?: OpenGeniRequestOptions): Promise<AuthRun>;
+    run(workspaceId: string, browserSessionId: string, authRunId: string): AuthRunResource;
+}
+export declare class BrowserAuthRunCollection {
+    private readonly transport;
+    readonly workspaceId: string;
+    readonly browserSessionId: string;
+    constructor(transport: BrowserInteractionTransport, workspaceId: string, browserSessionId: string);
+    list(options?: Omit<AuthRunListOptions, "browserSessionId">): Promise<AuthRunListResponse>;
+    run(authRunId: string): AuthRunResource;
+    start(request: StartAuthRunRequest, options?: OpenGeniRequestOptions): Promise<AuthRunResource>;
+}
+export declare class AuthRunResource {
+    private readonly transport;
+    readonly workspaceId: string;
+    readonly browserSessionId: string;
+    readonly id: string;
+    constructor(transport: BrowserInteractionTransport, workspaceId: string, browserSessionId: string, id: string);
+    get(options?: OpenGeniRequestOptions): Promise<AuthRun>;
+    report(request: ReportAuthRunRequest, options?: OpenGeniRequestOptions): Promise<AuthRunMutationResponse>;
+    protectedFill(request: ProtectedAuthFillRequest, options?: OpenGeniRequestOptions): Promise<ProtectedAuthFillResponse>;
+    advanceExternal(request: ExternalAuthRunRequest, options?: OpenGeniRequestOptions): Promise<ExternalAuthRunResponse>;
+    /** Human-session helper. Hosted provider URLs never appear in model tools. */
+    openExternalFlow(request: ExternalAuthInteractiveRequest, options?: OpenGeniRequestOptions): Promise<ExternalAuthInteractiveResponse>;
+    verify(request: VerifyAuthRunRequest, options?: OpenGeniRequestOptions): Promise<AuthRunMutationResponse>;
+}
+export declare class InteractionInterventionCollection {
+    private readonly transport;
     constructor(transport: BrowserInteractionTransport);
+    list(workspaceId: string, options?: InteractionInterventionListOptions): Promise<InteractionInterventionListResponse>;
+    intervention(workspaceId: string, interventionId: string): InteractionInterventionResource;
+    create(workspaceId: string, request: CreateInteractionInterventionRequest, options?: OpenGeniRequestOptions): Promise<InteractionInterventionResource>;
+}
+export declare class InteractionInterventionResource {
+    private readonly transport;
+    readonly workspaceId: string;
+    readonly id: string;
+    constructor(transport: BrowserInteractionTransport, workspaceId: string, id: string);
+    get(options?: OpenGeniRequestOptions): Promise<InteractionIntervention>;
+    resolve(request: ResolveInteractionInterventionRequest, options?: OpenGeniRequestOptions): Promise<InteractionInterventionMutationResponse>;
 }
 export declare class AttachedBrowserDeviceCollection {
     private readonly transport;
@@ -765,6 +1394,7 @@ export declare class BrowserIdentityResource {
     constructor(transport: BrowserInteractionTransport, workspaceId: string, id: string);
     get(options?: OpenGeniRequestOptions): Promise<BrowserIdentity>;
     revisions(options?: OpenGeniRequestOptions): Promise<BrowserRevisionListResponse>;
+    update(request: UpdateBrowserIdentityRequest, options?: OpenGeniRequestOptions): Promise<BrowserIdentityMutationResponse>;
 }
 export declare class BrowserSessionCollection {
     private readonly transport;
@@ -778,12 +1408,19 @@ export declare class BrowserSessionResource {
     private readonly transport;
     readonly workspaceId: string;
     readonly id: string;
+    readonly auth: BrowserAuthRunCollection;
+    readonly clipboard: BrowserClipboardResource;
+    readonly downloads: BrowserDownloadCollection;
     readonly tabs: BrowserTargetCollection;
     /** Alias for hosts that prefer the protocol term. */
     readonly targets: BrowserTargetCollection;
     constructor(transport: BrowserInteractionTransport, workspaceId: string, id: string);
     get(options?: OpenGeniRequestOptions): Promise<BrowserSession>;
     observe(targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
+    targetState(targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetState>;
+    readDom(targetId: string, request: BrowserDomReadRequest, options?: OpenGeniRequestOptions): Promise<BrowserDomReadResponse>;
+    capture(targetId: string, options?: OpenGeniRequestOptions, captureOptions?: BrowserScreenshotOptions): Promise<BrowserFrame>;
+    screenshot(targetId: string, captureOptions?: BrowserScreenshotOptions, options?: OpenGeniRequestOptions): Promise<BrowserFrame>;
     act(request: BrowserActionRequest, options?: OpenGeniRequestOptions): Promise<BrowserActionReceipt>;
     receipt(operationId: string, options?: OpenGeniRequestOptions): Promise<BrowserActionReceipt>;
     diagnostics(targetId: string, options?: BrowserDiagnosticsOptions): Promise<BrowserDiagnosticBatch>;
@@ -794,14 +1431,41 @@ export declare class BrowserSessionResource {
     resume(request?: BrowserSessionLifecycleRequest, options?: OpenGeniRequestOptions): Promise<BrowserSessionMutationResponse>;
     end(request?: BrowserSessionLifecycleRequest, options?: OpenGeniRequestOptions): Promise<BrowserSessionMutationResponse>;
 }
+export declare class BrowserClipboardResource {
+    private readonly transport;
+    readonly workspaceId: string;
+    readonly browserSessionId: string;
+    constructor(transport: BrowserInteractionTransport, workspaceId: string, browserSessionId: string);
+    read(options?: OpenGeniRequestOptions): Promise<BrowserClipboard>;
+}
+export declare class BrowserDownloadCollection {
+    private readonly transport;
+    readonly workspaceId: string;
+    readonly browserSessionId: string;
+    constructor(transport: BrowserInteractionTransport, workspaceId: string, browserSessionId: string);
+    list(options?: OpenGeniRequestOptions): Promise<BrowserDownloadListResponse>;
+    download(downloadId: string): BrowserDownloadResource;
+}
+export declare class BrowserDownloadResource {
+    private readonly transport;
+    readonly workspaceId: string;
+    readonly browserSessionId: string;
+    readonly id: string;
+    constructor(transport: BrowserInteractionTransport, workspaceId: string, browserSessionId: string, id: string);
+    get(options?: OpenGeniRequestOptions): Promise<BrowserDownload>;
+    /** Publish this exact private browser download into the source session's
+     * workspace. Pass an operationId when the caller needs retry identity across
+     * process boundaries; otherwise one is generated for this call. */
+    saveToWorkspace(destinationPath: string, options?: BrowserDownloadSaveOptions): Promise<BrowserDownloadSaveResponse>;
+}
 export declare class BrowserTargetCollection {
     private readonly transport;
     private readonly workspaceId;
     private readonly browserSessionId;
     constructor(transport: BrowserInteractionTransport, workspaceId: string, browserSessionId: string);
     list(options?: OpenGeniRequestOptions): Promise<BrowserTargetListResponse>;
-    open(url?: string, options?: OpenGeniRequestOptions): Promise<BrowserTarget>;
-    select(targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTarget>;
+    open(url?: string, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
+    select(targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
     close(targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetListResponse>;
 }
 export declare class ComputerSessionCollection {
@@ -819,15 +1483,25 @@ export declare class ComputerSessionResource {
     readonly targets: ComputerTargetCollection;
     /** Native application/window targets are also the public app collection. */
     readonly apps: ComputerTargetCollection;
+    readonly clipboard: ComputerClipboardResource;
     constructor(transport: BrowserInteractionTransport, workspaceId: string, id: string);
     get(options?: OpenGeniRequestOptions): Promise<ComputerSession>;
     observe(targetId: string, options?: OpenGeniRequestOptions): Promise<ComputerObservation>;
+    capture(targetId: string, options?: OpenGeniRequestOptions): Promise<ComputerFrame>;
     act(request: ComputerActionRequest, options?: OpenGeniRequestOptions): Promise<ComputerActionReceipt>;
     receipt(operationId: string, options?: OpenGeniRequestOptions): Promise<ComputerActionReceipt>;
     attach(request: ComputerSessionAttachmentRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionAttachment>;
+    inputPosture(options?: OpenGeniRequestOptions): Promise<ComputerSessionInputPosture>;
     heartbeat(options?: OpenGeniRequestOptions): Promise<ComputerSessionHeartbeatResponse>;
     end(request?: ComputerSessionLifecycleRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionMutationResponse>;
 }
+export declare class ComputerClipboardResource {
+    private readonly transport;
+    readonly workspaceId: string;
+    readonly computerSessionId: string;
+    constructor(transport: BrowserInteractionTransport, workspaceId: string, computerSessionId: string);
+    read(options?: OpenGeniRequestOptions): Promise<ComputerClipboard>;
+}
 export declare class ComputerTargetCollection {
     private readonly transport;
     private readonly workspaceId;
@@ -854,6 +1528,13 @@ export type BrowserFrameMetadata = {
 export type BrowserFrame = BrowserFrameMetadata & {
     data: Uint8Array;
 };
+export type BrowserScreenshotOptions = {
+    /** Capture the document content instead of the visible viewport. */
+    fullPage?: boolean;
+    format?: "jpeg" | "png";
+    /** JPEG quality, from 1 to 100. Ignored for PNG. */
+    quality?: number;
+};
 export type ComputerFrameMetadata = {
     frameId: string;
     computerSessionId: string;
@@ -883,3 +1564,4 @@ export declare function decodeBrowserFrameMessage(message: ArrayBuffer | Uint8Ar
 export declare function decodeComputerFrameMessage(message: ArrayBuffer | Uint8Array): Promise<ComputerFrame>;
 export declare function parseBrowserFrameMetadata(value: unknown): BrowserFrameMetadata;
 export declare function parseComputerFrameMetadata(value: unknown): ComputerFrameMetadata;
+export declare function decodeComputerFrameMetadataHeader(value: string): ComputerFrameMetadata;